Skip to content

chore(deps): bump the npm_and_yarn group across 3 directories with 4 updates#41

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-8d03229e3a
Closed

chore(deps): bump the npm_and_yarn group across 3 directories with 4 updates#41
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-8d03229e3a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 2 updates in the / directory: turbo and vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/cli directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/web directory: vitest.

Updates turbo from 2.9.6 to 2.9.14

Release notes

Sourced from turbo's releases.

Turborepo v2.9.14

[!NOTE] This release contains important security fixes.

High:

Low:

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.9.12...v2.9.14

Turborepo v2.9.13-canary.1

What's Changed

Changelog

... (truncated)

Commits

Updates vitest from 2.1.9 to 3.2.6

Release notes

Sourced from vitest's releases.

v3.2.6

   🐞 Bug Fixes

    View changes on GitHub

v3.2.5

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.2.4

   🐞 Bug Fixes

    View changes on GitHub

v3.2.3

   🚀 Features

... (truncated)

Commits
  • b6d56f8 chore: release v3.2.6
  • 16f120d fix: pin last supported vite-node version
  • 2cbad0a chore: release v3.2.5
  • 385a1ae fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • af88b1f feat(api): add allowWrite and allowExec options to api [backport to v3]...
  • c666d14 chore: release v3.2.4
  • 8a18c8e fix(cli): throw error when --shard x/\<count> exceeds count of test files (#...
  • 8abd7cc chore(deps): update tinypool (#8174)
  • 93f3200 fix(deps): update all non-major dependencies (#8123)
  • 0c3be6f fix(coverage): ignore SCSS in browser mode (#8161)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.


Updates esbuild from 0.21.5 to 0.27.7

Release notes

Sourced from esbuild's releases.

v0.27.7

  • Fix lowering of define semantics for TypeScript parameter properties (#4421)

    The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

    // Original code
class Foo {
  constructor(public x = 1) {}
  y = 2
}
// Old output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
this.x = x;
__publicField(this, "y", 2);
}
x;
}
// New output (with --loader=ts --target=es2021)
class Foo {
constructor(x = 1) {
__publicField(this, "x", x);
__publicField(this, "y", 2);
}
}

v0.27.5

  • Fix for an async generator edge case (#4401, #4417)

    Support for transforming async generators into the equivalent state machine was added in version 0.19.0. However, the generated state machine didn't work correctly when polling async generators concurrently, such as in the following code:

    async function* inner() { yield 1; yield 2 }
async function* outer() { yield* inner() }
let gen = outer()
for await (let x of [gen.next(), gen.next()]) console.log(x)

    Previously esbuild's output of the above code behaved incorrectly when async generators were transformed (such as with --supported:async-generator=false). The transformation should be fixed starting with this release.

    This fix was contributed by @​2767mr.

  • Fix a regression when metafile is enabled (#4420, #4418)

    This release fixes a regression introduced by the previous release. When metafile: true was enabled in esbuild's JavaScript API, builds with build errors were incorrectly throwing an error about an empty JSON string instead of an object containing the build errors.

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

  • Fix regression with --define and import.meta (#4010, #4012, #4013)

    The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

    This fix was contributed by @​sapphi-red.

0.24.1

  • Allow es2024 as a target in tsconfig.json (#4004)

    TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

    {
  "compilerOptions": {
    "target": "ES2024"
  }
}

    As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

    This fix was contributed by @​billyjanitsch.

  • Allow automatic semicolon insertion after get/set

    This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

    class Foo {
  get
  *x() {}
  set
  *y() {}
}

    The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

  • Allow quoted property names in --define and --pure (#4008)

    The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

    

    • 






... (truncated)





Commits

    

  • 2025c9f publish 0.27.7 to npm
    • 

  • c6b586e fix typo in Makefile for @esbuild/win32-x64
    • 

  • 9785e14 publish 0.27.6 to npm
    • 

  • b169d8c Revert "update go 1.25.7 => 1.26.1"
    • 

  • 7ac8762 run make update-compat-table
    • 

  • 8b5ff53 remove an incorrect else
    • 

  • e955268 fix #4421: lower generated class fields if needed
    • 

  • a5a2500 ci: move make test-old-ts
    • 

  • b71e7ac omit go's buildvcs for more reproducible builds
    • 

  • 7406b09 organize make platform-all output in Makefile
    • 

  • Additional commits viewable in compare view
    • 






Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.






Updates vite from 5.4.21 to 7.3.5



Release notes

Sourced from vite's releases.




v7.3.5


Please refer to CHANGELOG.md for details.


v7.3.3


Please refer to CHANGELOG.md for details.


v7.3.2


Please refer to CHANGELOG.md for details.


v7.3.1


Please refer to CHANGELOG.md for details.


v7.3.0


Please refer to CHANGELOG.md for details.


v7.2.7


Please refer to CHANGELOG.md for details.


v7.2.6


Please refer to CHANGELOG.md for details.


v7.2.5


Please refer to CHANGELOG.md for details.


Note: 7.2.5 failed to publish so it is skipped on npm


v7.2.4


Please refer to CHANGELOG.md for details.


v7.2.3


Please refer to CHANGELOG.md for details.


v7.2.2


Please refer to CHANGELOG.md for details.


v7.2.1


Please refer to CHANGELOG.md for details.


v7.2.0


Please refer to CHANGELOG.md for details.


v7.2.0-beta.1


Please refer to CHANGELOG.md for details.


v7.2.0-beta.0


Please refer to CHANGELOG.md for details.


v7.1.12


Please refer to CHANGELOG.md for details.





... (truncated)





Changelog

Sourced from vite's changelog.




7.3.5 (2026-06-01)


Bug Fixes



Miscellaneous Chores



7.3.4 (2026-06-01)


Bug Fixes



7.3.3 (2026-05-07)


Bug Fixes



7.3.2 (2026-04-06)


Bug Fixes



7.3.1 (2026-01-07)


Features


    

  • add ignoreOutdatedRequests option to optimizeDeps (#21364) (9d39d37)
    • 



7.3.0 (2025-12-15)


Features


    

  • deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)
    • 



7.2.7 (2025-12-08)


Bug Fixes



7.2.6 (2025-12-01)


7.2.5 (2025-12-01)


Bug Fixes






... (truncated)





Commits






Updates vitest from 2.1.9 to 3.2.6



Release notes

Sourced from vitest's releases.




v3.2.6


   🐞 Bug Fixes



    View changes on GitHub


v3.2.5


   🚀 Features



   🐞 Bug Fixes



    View changes on GitHub


v3.2.4


   🐞 Bug Fixes



    View changes on GitHub


v3.2.3


   🚀 Features






... (truncated)





Commits

    

  • b6d56f8 chore: release v3.2.6
    • 

  • 16f120d fix: pin last supported vite-node version
    • 

  • 2cbad0a chore: release v3.2.5
    • 

  • 385a1ae fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
    • 

  • af88b1f feat(api): add allowWrite and allowExec options to api [backport to v3]...
    • 

  • c666d14 chore: release v3.2.4
    • 

  • 8a18c8e fix(cli): throw error when --shard x/\<count> exceeds count of test files (#...
    • 

  • 8abd7cc chore(deps): update tinypool (#8174)
    • 

  • 93f3200 fix(deps): update all non-major dependencies (#8123)
    • 

  • 0c3be6f fix(coverage): ignore SCSS in browser mode (#8161)
    • 

  • Additional commits viewable in compare view
    • 






Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.






Updates vitest from 2.1.9 to 3.2.6



Release notes

Sourced from vitest's releases.




v3.2.6


   🐞 Bug Fixes



    View changes on GitHub


v3.2.5


   🚀 Features



   🐞 Bug Fixes



    View changes on GitHub


v3.2.4


   🐞 Bug Fixes



    View changes on GitHub


v3.2.3


   🚀 Features






... (truncated)





Commits

    

  • b6d56f8 chore: release v3.2.6
    • 

  • 16f120d fix: pin last supported vite-node version
    • 

  • 2cbad0a chore: release v3.2.5
    • 

  • 385a1ae fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
    • 

  • af88b1f feat(api): add allowWrite and allowExec options to api [backport to v3]...
    • 

  • c666d14 chore: release v3.2.4
    • 

  • 8a18c8e fix(cli): throw error when --shard x/\<count> exceeds count of test files (#...
    • 

  • 8abd7cc chore(deps): update tinypool (#8174)
    • 

  • 93f3200 fix(deps): update all non-major dependencies (#8123)
    • 

  • 0c3be6f fix(coverage): ignore SCSS in browser mode (#8161)
    • 

  • Additional commits viewable in compare view
    • 






Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.






Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.





Dependabot commands and options



You can trigger Dependabot actions by commenting on this PR:


    

  • @dependabot rebase will rebase this PR
    • 

  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • 

  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • 

  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • 

  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • 

  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    
You can disable automated security fix PRs for this repo from the Security Alerts page.
    • 




    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

      
        @dependabot
  




      

        
          chore(deps): bump the npm_and_yarn group across 3 directories with 4 …
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          dd28770
        
      

    

  

    

      
…updates

Bumps the npm_and_yarn group with 2 updates in the / directory: [turbo](https://github.com/vercel/turborepo) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).
Bumps the npm_and_yarn group with 1 update in the /packages/cli directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).
Bumps the npm_and_yarn group with 1 update in the /packages/web directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `turbo` from 2.9.6 to 2.9.14
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.9.6...v2.9.14)

Updates `vitest` from 2.1.9 to 3.2.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest)

Updates `esbuild` from 0.21.5 to 0.27.7
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.21.5...v0.27.7)

Updates `vite` from 5.4.21 to 7.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite)

Updates `vitest` from 2.1.9 to 3.2.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest)

Updates `vitest` from 2.1.9 to 3.2.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest)

---
updated-dependencies:
- dependency-name: turbo
  dependency-version: 2.9.14
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vitest
  dependency-version: 3.2.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.27.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.3.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vitest
  dependency-version: 3.2.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vitest
  dependency-version: 3.2.6
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Jun 8, 2026

    

  



  

  

    
  


  

      


    @dependabot
dependabot
Bot


    mentioned this pull request
    
      Jun 8, 2026
    





  


  

      
   Closed

  







  









      

  
      



  

  @coderabbitai






  



    

      

  

    

      
          
      

      
            coderabbitai
  Bot

      

      

      commented


        Jun 8, 2026



      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        



        

    

  





      


        



  
    

      
          


Review Change Stack



No actionable comments were generated in the recent review. 🎉



ℹ️ Recent review info


⚙️ Run configuration

Configuration used: Organization UI


Review profile: CHILL


Plan: Pro


Run ID: 6db1e840-e41c-4d35-9f08-9a97e1db3e46





📥 Commits

Reviewing files that changed from the base of the PR and between cdf4ce8 and dd28770.





⛔ Files ignored due to path filters (1)

    

  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
    • 






📒 Files selected for processing (2)

    

  • packages/cli/package.json
    • 

  • packages/web/package.json
    • 











📝 Walkthrough


Summary by CodeRabbit


Chores


    

  • 테스트 프레임워크 개발 의존성을 최신 버전으로 업그레이드했습니다.
    • 




개요


모노레포의 CLI 및 웹 패키지에서 vitest 개발 의존성이 버전 ^2.1.9에서 ^3.2.6으로 업그레이드되었습니다.


변경 사항


Vitest 버전 업그레이드






레이어 / 파일(들)
요약






vitest v3.2.6 업그레이드 
 packages/cli/package.json, packages/web/package.json		
두 패키지의 devDependencies에서 vitest 버전이 ^2.1.9에서 ^3.2.6으로 통일 업그레이드됨.






예상 코드 리뷰 노력


🎯 1 (Trivial) | ⏱️ ~3 분


시




버전을 올려 테스트 함은

vitest의 새 기능을 안다는 뜻 🐰

이제 더 빠르게, 더 안정히

두 패키지가 함께 나아가니

의존성의 조화로운 춤 🎉









🚥 Pre-merge checks | ✅ 5


✅ Passed checks (5 passed)





Check name
Status
Explanation






Title check
✅ Passed
PR 제목은 npm_and_yarn 그룹의 의존성 업데이트를 명확하고 간결하게 설명하며, 변경 사항의 주요 내용을 정확히 반영합니다.




Description check
✅ Passed
PR 설명은 업데이트된 패키지들(turbo, vitest, esbuild, vite)과 각각의 버전 변경, 보안 수정 사항을 포함하여 변경 사항과 관련성이 있습니다.




Docstring Coverage
✅ Passed
No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.




Linked Issues check
✅ Passed
Check skipped because no linked issues were found for this pull request.




Out of Scope Changes check
✅ Passed
Check skipped because no linked issues were found for this pull request.








✏️ Tip: You can configure your own custom pre-merge checks in the settings.







✨ Finishing Touches


🧪 Generate unit tests (beta)

    

  •     Create PR with unit tests
    • 

  •     Commit unit tests in branch dependabot/npm_and_yarn/npm_and_yarn-8d03229e3a
    • 






✨ Simplify code

    

  •     Create PR with simplified code
    • 

  •     Commit simplified code in branch dependabot/npm_and_yarn/npm_and_yarn-8d03229e3a
    • 








Warning
Billing warning: we have not been able to collect payment for this subscription for more than 72 hours. Please update the payment method or pay any pending invoices in Billing to avoid service interruption.







Comment @coderabbitai help to get the list of available commands and usage tips.






      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
        





      

  
      



  

  @seonghobae






  



    

      

  

    

      
          
      

      
            seonghobae
  

      

      

      commented


        Jun 10, 2026



      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        



        

    

  





      


        



  
    

      
          
최신 upstream/main 기준으로 이 PR은 79개 파일의 stale diff를 포함합니다. 특히 .claude agent/skill 파일 삭제와 오래된 워크플로우/lockfile/env 변경이 섞여 있어 그대로 유지하거나 upstream에 올리면 이미 반영된 변경을 되돌릴 위험이 큽니다.


현재 큐는 upstream #30 → upstream #21 순서로 정리 중입니다. 이 PR의 아이디어가 여전히 필요하면 최신 upstream/main에서 단일 목적 브랜치로 깨끗하게 다시 추출하겠습니다. stale PR로 닫습니다.


      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    

      
    

    


      


          @seonghobae
seonghobae




          closed this


      Jun 10, 2026

    

  


    







      

  
      



  

  @dependabot


    @github




  



    

      

  

    

      
          
      

      
            dependabot
  Bot

      

      

      commented

        on behalf of github

        Jun 10, 2026



      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        



        

  Author


    

  





      


        



  
    

      
          
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.


To ignore these dependencies, configure ignore rules in dependabot.yml


      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  
  

  
      @dependabot
  dependabot
Bot

    
    deleted the
    
      
        dependabot/npm_and_yarn/npm_and_yarn-8d03229e3a
    
    branch

    June 10, 2026 14:07    
    













  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    



      

        
          1 more reviewer
          
          
        
          

            

  

    


  
      @coderabbitai
  
    coderabbitai[bot]


    
      
        
      
    
    coderabbitai[bot] approved these changes



          

      

      Reviewers whose approvals may not affect merge requirements

      






    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    javascript

  Pull requests that update javascript code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      1 participant
    

    

        
          @seonghobae